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What is claimed is: 

1. A public, non-commutative method for encoding an original message to be passed 

to a recipient by way of an grantor, the method comprising the steps of: 
5 obtaining an encrypted message representative of the original message, the 

encrypted message having been encrypted with a public key corresponding to the grantor; 
generating a public proxy key based on a private key corresponding to the 

recipient, wherein it is computationally difficult to recover the private key corresponding 

to the recipient from the public proxy key; and 
10 applying the public proxy key to transform the encrypted message into a 

transformed message, wherein the transformed message is decryptable by the recipient 

using information selected from the private key corresponding to the recipient and any 

available public information. 

15 2. The method of claim 1, wherein the encrypted message has been encrypted with 
an ElGamal encryption scheme. 

3. The method of claim 1, wherein the encrypted message has been encrypted with a 
modified ElGamal encryption scheme. 

20 

4. The method of claim 1, wherein the receiving, generating, and applying steps are 
performed by the grantor. 

5. The method of claim 1, further comprising the step of providing the transformed 
25 message to the recipient. 

6. The method of claim 5, further comprising the step of decrypting the transformed 
message using information selected from the private key corresponding to the recipient 
and any available public information. 
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7. The method of claim 5, further comprising the step of decrypting the transformed 
message using the private key corresponding to the recipient. 

8. The method of claim 2, wherein the encrypted message comprises a first portion 
5 and a second portion, the first portion encoding a generator and a random key, and the 

second portion encoding the original message, the public key corresponding to the 
grantor, and the random key. 

9. The method of claim 8, wherein the applying step operates on the second portion 
10 of the encrypted message. 

10. The method of claim 3, wherein the encrypted message comprises a first portion 
and a second portion, the first portion encoding the original message, a generator, and a 
random key, and the second portion encoding the public key corresponding to the grantor 

15 and the random key. 

11. The method of claim 10, wherein the applying step operates on the second portion 
of the encrypted message. 

20 " 12. The method of claim 4, wherein the encrypted message comprises a first portion 
and a second portion, the first portion encoding the original message, a generator, and a 
random key, and the second portion encoding the public key corresponding to the grantor 
and the random key. 

25 13. The method of claim 12, wherein the applying step operates on the second portion 
of the encrypted message. 

14. The method of claim 1, wherein the original message is passed to a recipient 
through at least one additional intermediate grantor by repeating the generating and 
30 applying steps for each additional intermediate grantor. 
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15. A public, non-commutative method for encrypting an original message to be 
passed to a recipient by way of an grantor, the method comprising the steps of: 

obtaining an encrypted message representative of the original message, the 
encrypted message having been encrypted with a public key corresponding to the grantor; 
and 

transforming the encrypted message, using a transformation key corresponding to 
the recipient, into a transformed message, wherein the transformed message is 
decryptable by the recipient using information selected from a private key corresponding 
to the recipient and any available public information. 

16. The method of claim 15, wherein the transformation key comprises a private key 
corresponding to the recipient. 



17. The method of claim 15, wherein the transformation key comprises a public key 
15 corresponding to the recipient. 

18. The method of claim 15, wherein the encrypted message has been encrypted with 
a Cramer-Shoup encryption scheme. 

20 19, The method of claim 15 wherein the transformed message is decryptable by the 
recipient using a private key corresponding to the recipient. 



20. The method of claim 15, wherein the original message is passed to a recipient 
through at least one additional intermediate grantor by repeating the transforming step for 
25 each additional intermediate grantor. 
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